Privacy Policy

Data Controller

The Data Controller is Fortune Nature S.R.L. (VAT 02487680973), based in Florence, Italy. For any request regarding your personal data you can write to info@giaogiao.it.

Data we collect

Browsing data: to operate the website we process technical data such as IP address, browser and device type, automatically generated by the use of internet communication protocols.

Data you provide voluntarily: if you contact us by email or phone, we process the data you share (e.g. name, contact details, message content) in order to reply to your request.

Orders: online orders are handled through third-party platforms; the related data is processed according to those platforms’ own privacy notices.

Purposes and legal basis

We process data to: provide and keep the website secure (legitimate interest), respond to contact requests (pre-contractual measures or legitimate interest) and comply with legal obligations.

GiaoGiao Club

If you join GiaoGiao Club, we process the data needed to create and manage your member card: first name, last name, email, phone number, international dialling code, date of birth, favourite location, referral code if provided, QR or physical card number, points balance, point movements, benefits, coupons, check-ins and orders linked to the profile.

The legal basis for creating the account, verifying the email, assigning points and managing rewards or support is the performance of the Club service requested by the user. Promotional communications by WhatsApp, email or SMS and preference-based personalisation are optional and based on your consent, which you can change or withdraw in the member centre or by writing to info@giaogiao.it.

Cookies and third-party tools

The website uses technical cookies necessary for its operation, which do not require consent. To load typefaces we use Google Fonts and we display public reviews through Google services; these services may collect technical data according to their respective notices.

We do not use profiling cookies for marketing purposes without your consent.

Data sharing

Data may be processed by suppliers who support the technical management of the website and Club (e.g. hosting, management system, email, SMS or WhatsApp delivery), appointed as processors where required. Some suppliers may process data outside the European Economic Area only where appropriate safeguards are in place. We do not sell or transfer your data to third parties for marketing purposes.

Retention

We keep data only for as long as strictly necessary for the stated purposes and to comply with legal obligations, after which it is deleted or anonymised. Club data is kept while the account remains active or while needed to manage points, rewards, requests, disputes or legal obligations; consent and withdrawal records are kept as proof of the choices expressed.

Your rights

You have the right to access your data, request its rectification or erasure, restrict or object to its processing and to data portability. You can exercise these rights by writing to info@giaogiao.it. You also have the right to lodge a complaint with the Italian Data Protection Authority (Garante).

Changes to this notice

We may update this notice. Changes take effect once published on this page; we invite you to review it periodically.